last executing test programs: 4m32.338438272s ago: executing program 1 (id=3321): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(r2, &(0x7f0000000280)='net/ip_mr_cache\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000380)=@sco={0x1f, @none}, 0x0, 0x0, 0x1}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 4m25.847941781s ago: executing program 1 (id=3334): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000769000/0x1000)=nil) r5 = syz_open_procfs(r2, &(0x7f0000000280)='net/ip_mr_cache\x00') read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB]) 4m24.472763753s ago: executing program 1 (id=3338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, &(0x7f0000000040)=0x4, 0xfed, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) 4m22.683258643s ago: executing program 1 (id=3341): socket(0x10, 0x3, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick=0x8001}], 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0], 0x24}, 0x1, 0x5502000000000000}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf2501000000040007800c00020003000000000000000c000800070000000000000072ac30b628823dc3657c663f69f551d34320ee0d1cdce61612247322400753b0ffa1feaaf6b9494f1213d8710a6dd5566911bea9a0259306d245e49c391cc09cf70d1e64d25e3690c3e7a17633c65c24a8df93f32b188d9003ea6cfdbc11fdd39402209b2076021d39805742816daff361c84fb96a51a2744e80ecff2ec73082d34b0c56e3f81e0d7d5a7fefaf4a3972e5a12a5d1e58735406f29bd8463c497e0264c9806c5a1591ddf03c444cdf03d455cdbf804296e29cfb2d49538846e00892eef505dcf1abc62c6157083cc8ec2389ce37a3b8b0050a0f3a8bd6241ad9aac958fe3995792125baeff6adecd76bcf0e9feb1a3a1a048b37ce27d96d1177f61b7eff18cff3301a7dda3bfb77f13501ee6f8d5cdc4ca31510fa30db5f4e89b696d9f12208002a3f06ae291e5c882ae66ee7a9ed11c515fe7115920389cb8fac51b11e4386cc8d41b36dc14df7f1da340b8b66efa1aba4718d47f7e3605d07b837851efb5f4368b6199f8e6b7c0e2f63"], 0x30}, 0x1, 0x0, 0x0, 0x24004040}, 0x20008044) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xff00) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r1, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000}}}, 0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4m18.6659735s ago: executing program 1 (id=3348): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) io_uring_enter(0xffffffffffffffff, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) 4m16.891062353s ago: executing program 1 (id=3355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004080800080000000100000080000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x8000000) r4 = semget$private(0x0, 0x1, 0x4ac0c2fc29e33682) semtimedop(r4, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x2, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48844}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m1.629578842s ago: executing program 32 (id=3355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004080800080000000100000080000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x8000000) r4 = semget$private(0x0, 0x1, 0x4ac0c2fc29e33682) semtimedop(r4, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x2, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48844}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 16.625364644s ago: executing program 2 (id=3853): syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = fanotify_init(0x200, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xd, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xf}}}}}]}}]}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="006163736563000018000280050009000100ff000c000100000000000000000008000500", @ANYRES32=r5], 0x50}}, 0x800) setsockopt$sock_attach_bpf(r2, 0x6, 0x25, &(0x7f0000000040), 0x4) r6 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r7 = dup(r6) fanotify_mark(r1, 0x1, 0x48001059, r7, 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c100000000000224e0000", 0x58}], 0x1) syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x100000000000017d, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000980)) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}}, 0x8004) 14.746887264s ago: executing program 0 (id=3860): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) io_uring_enter(0xffffffffffffffff, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) 13.878706944s ago: executing program 2 (id=3862): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/3, 0x3}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x7000) fchmod(0xffffffffffffffff, 0x0) 13.078600969s ago: executing program 4 (id=3864): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) 12.580999756s ago: executing program 5 (id=3865): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x420004008d}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b2319333260e10998974805be5cf48334ebe4dc734f89b56906187f8fa2e1a2a052d141634663115476a2838530b516be3249c93c1100a01c9a60e3d4dffdf2b93b3e8167fbf2fbd70df89b5ee5a9725", @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44041) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11.468507397s ago: executing program 4 (id=3866): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x420004008d}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b2319333260e10998974805be5cf48334ebe4dc734f89b56906187f8fa2e1a2a052d141634663115476a2838530b516be3249c93c1100a01c9a60e3d4dffdf2b93b3e8167fbf2fbd70df89b5ee5a9725", @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44041) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11.464071925s ago: executing program 5 (id=3867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, &(0x7f0000000040)=0x4, 0xfed, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) 11.404243604s ago: executing program 2 (id=3869): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffe) pwritev2(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x41) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000009040000160202000005c07fab6205240000000d240f01000000000000000000042402000905810340"], 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 10.009645543s ago: executing program 4 (id=3870): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 9.898709953s ago: executing program 3 (id=3871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, &(0x7f0000000040)=0x4, 0xfed, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) 9.710406438s ago: executing program 0 (id=3872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.58853382s ago: executing program 4 (id=3873): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) poll(&(0x7f0000000200)=[{r2, 0x204}], 0x1, 0x7) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) listen(r3, 0x20000005) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x48, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20000002}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r5, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, 0x0}}], 0x1, 0x2022, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10) write(r5, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb4700", 0x13) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) pipe(&(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0xfa, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x8001, 0x10, 0x1, {0x22, 0x4fc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="81d952c710be003c00"]}, {0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="060378d089da6580"]}]}) 7.7828693s ago: executing program 3 (id=3874): socket(0x10, 0x3, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick=0x8001}], 0x38) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0], 0x24}, 0x1, 0x5502000000000000}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x24004040}, 0x20008044) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xff00) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000}}}, 0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 7.777053591s ago: executing program 0 (id=3875): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x2, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r2, 0x52de, 0xf62e, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000950000004621dd2f93014a360b62e856856a0c61e2e2b22de16321f3a27e8716a90fdd78168a36f5100e2e02f8f99f50c08cbb2852cd7760de0182cab05cd89d37bdc28c6256bcb8f183eb98907e2271f1cc702b49bbc7e19b3c05d5a23cde766536371fe7373d3989b1891fc9e435021408626a98f1541031e46bdca238b2ec4f93e60670772d1a08fe2223b3b65f8d31e8b787fdca3df71eaec1de1d682c430a07f8d259506625ad105b6811a0000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x0, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f00000000c0)={0x22, 0xbd, 0x8, 0x4, 0x3}, 0x6) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=@md5={0x1, "e20c9fbf5e40fba0dd356e23434fab5b"}, 0x11, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x702, 0x36, 0x0, &(0x7f0000000000)="e460334470d8d4006b00c15286dd4b0c233547f2cbfa947001bd9e27f289c147631f7be047c25d7639d79d8b588340e30d0cb1837e9a", 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) socket(0x15, 0x5, 0x0) 7.773189198s ago: executing program 5 (id=3876): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) r4 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r4, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) 6.313226853s ago: executing program 5 (id=3877): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 6.247094824s ago: executing program 2 (id=3878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000001005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 5.345321121s ago: executing program 3 (id=3879): socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0xe3, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x5, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x9, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x5, 0x8004, 0x5, 0xfffffff3, 0x129432e5, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x7, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x1000008, 0x9, 0x6, 0x47, 0x4, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x100bc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0xba, 0xfffffffe, 0x102, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0xfffffff9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1c9, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x7, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x0, 0x7fff, 0x101, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x40, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x8, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x10007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x80000200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000022c0)='dctcp\x00', 0x51) 5.329218095s ago: executing program 0 (id=3880): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x20000000, 0x101000) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x14002, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000001a40)=0x100000000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) read$FUSE(r6, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000040)=0x1) rt_sigqueueinfo(r1, 0x25, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000000040)=0x2) 4.923581242s ago: executing program 5 (id=3881): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x988, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r3, 0x52de, 0xf62e, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000950000004621dd2f93014a360b62e856856a0c61e2e2b22de16321f3a27e8716a90fdd78168a36f5100e2e02f8f99f50c08cbb2852cd7760de0182cab05cd89d37bdc28c6256bcb8f183eb98907e2271f1cc702b49bbc7e19b3c05d5a23cde766536371fe7373d3989b1891fc9e435021408626a98f1541031e46bdca238b2ec4f93e60670772d1a08fe2223b3b65f8d31e8b787fdca3df71eaec1de1d682c430a07f8d259506625ad105b6811a0000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) close(r0) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=@md5={0x1, "e20c9fbf5e40fba0dd356e23434fab5b"}, 0x11, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x702, 0x36, 0x0, &(0x7f0000000000)="e460334470d8d4006b00c15286dd4b0c233547f2cbfa947001bd9e27f289c147631f7be047c25d7639d79d8b588340e30d0cb1837e9a", 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) 4.130721683s ago: executing program 2 (id=3882): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r0, 0x0, 0x0}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.585252927s ago: executing program 0 (id=3883): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) r4 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r4, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) 3.580014137s ago: executing program 3 (id=3884): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(r2, &(0x7f0000000280)='net/ip_mr_cache\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000380)=@sco={0x1f, @none}, 0x0, 0x0, 0x1}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') 3.579108861s ago: executing program 4 (id=3885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, &(0x7f0000000040)=0x4, 0xfed, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) 2.102093459s ago: executing program 3 (id=3886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 686.776767ms ago: executing program 4 (id=3887): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x20000000, 0x101000) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x14002, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000001a40)=0x100000000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000040)=0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') rt_sigqueueinfo(r1, 0x25, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {}, {0x4, 0x6}, @control={0x9, 0x3, 0xb}}, {0x0, 0x0, 0x0, 0x4, @time={0xfffffffb}, {0x6, 0x4}, {0x0, 0x8}, @result={0x5, 0x4}}], 0x38) ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000000040)=0x2) 566.928619ms ago: executing program 0 (id=3888): socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0xe3, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x5, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x9, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x5, 0x8004, 0x5, 0xfffffff3, 0x129432e5, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x7, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x1000008, 0x9, 0x6, 0x47, 0x4, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x100bc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0xba, 0xfffffffe, 0x102, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0xfffffff9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1c9, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x7, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x0, 0x7fff, 0x101, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x40, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x8, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x10007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x80000200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d0000000014000280080001000100000008000200118000000500210000", @ANYRES32], 0x140}}, 0x40) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000022c0)='dctcp\x00', 0x51) 171.846496ms ago: executing program 3 (id=3889): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x988, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r3, 0x52de, 0xf62e, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000950000004621dd2f93014a360b62e856856a0c61e2e2b22de16321f3a27e8716a90fdd78168a36f5100e2e02f8f99f50c08cbb2852cd7760de0182cab05cd89d37bdc28c6256bcb8f183eb98907e2271f1cc702b49bbc7e19b3c05d5a23cde766536371fe7373d3989b1891fc9e435021408626a98f1541031e46bdca238b2ec4f93e60670772d1a08fe2223b3b65f8d31e8b787fdca3df71eaec1de1d682c430a07f8d259506625ad105b6811a0000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) close(r0) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=@md5={0x1, "e20c9fbf5e40fba0dd356e23434fab5b"}, 0x11, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x702, 0x36, 0x0, &(0x7f0000000000)="e460334470d8d4006b00c15286dd4b0c233547f2cbfa947001bd9e27f289c147631f7be047c25d7639d79d8b588340e30d0cb1837e9a", 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) 103.304512ms ago: executing program 2 (id=3890): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x2, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r3, 0x52de, 0xf62e, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000950000004621dd2f93014a360b62e856856a0c61e2e2b22de16321f3a27e8716a90fdd78168a36f5100e2e02f8f99f50c08cbb2852cd7760de0182cab05cd89d37bdc28c6256bcb8f183eb98907e2271f1cc702b49bbc7e19b3c05d5a23cde766536371fe7373d3989b1891fc9e435021408626a98f1541031e46bdca238b2ec4f93e60670772d1a08fe2223b3b65f8d31e8b787fdca3df71eaec1de1d682c430a07f8d259506625ad105b6811a0000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) close(r0) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=@md5={0x1, "e20c9fbf5e40fba0dd356e23434fab5b"}, 0x11, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x702, 0x36, 0x0, &(0x7f0000000000)="e460334470d8d4006b00c15286dd4b0c233547f2cbfa947001bd9e27f289c147631f7be047c25d7639d79d8b588340e30d0cb1837e9a", 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) socket(0x15, 0x5, 0x0) 0s ago: executing program 5 (id=3891): socket$kcm(0x11, 0x0, 0x300) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xa508}, &(0x7f0000000340)=0x8) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): 5849] chnl_net:caif_netlink_parms(): no params data found [ 628.171827][T15889] erofs (device nbd1): cannot find valid erofs superblock [ 628.464443][T15893] erofs (device nbd3): cannot find valid erofs superblock [ 628.647191][ T30] audit: type=1400 audit(1745236455.718:1032): avc: denied { unmount } for pid=14692 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 629.040166][T15849] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.053781][T15849] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.061163][ T5831] Bluetooth: hci2: command tx timeout [ 629.069511][T15849] bridge_slave_0: entered allmulticast mode [ 629.077049][T15849] bridge_slave_0: entered promiscuous mode [ 629.104567][T15849] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.112575][T15849] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.117625][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3257'. [ 629.120128][T15849] bridge_slave_1: entered allmulticast mode [ 629.137874][T15849] bridge_slave_1: entered promiscuous mode [ 629.226009][ T5875] net_ratelimit: 4 callbacks suppressed [ 629.226024][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.390109][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.055354][T15849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.170595][T15849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.714839][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.725383][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.733819][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.116063][T15926] netlink: 'syz.0.3262': attribute type 10 has an invalid length. [ 631.123956][T15926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3262'. [ 631.134921][ T5831] Bluetooth: hci2: command tx timeout [ 631.176387][T15927] CUSE: unknown device info "" [ 631.181386][T15927] CUSE: zero length info key specified [ 632.111878][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.135169][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.143364][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.391993][T15926] team0: Port device geneve0 added [ 632.444125][T15849] team0: Port device team_slave_0 added [ 632.554639][T15849] team0: Port device team_slave_1 added [ 632.633351][T15849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.652707][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.711566][T15849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.780394][T15849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.787976][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.816517][T15849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.713219][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.721498][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.752233][T15939] erofs (device nbd3): cannot find valid erofs superblock [ 634.674271][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.684897][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.703080][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.713652][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.780110][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.788359][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.847547][T15849] hsr_slave_0: entered promiscuous mode [ 634.849494][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.868741][T15849] hsr_slave_1: entered promiscuous mode [ 634.874933][T15849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.882662][T15849] Cannot create hsr debugfs directory [ 634.950349][T15946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15946 comm=syz.3.3266 [ 635.003377][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3268'. [ 635.166331][T15954] netlink: 'syz.4.3268': attribute type 10 has an invalid length. [ 635.174137][T15954] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3268'. [ 635.198667][T15954] CUSE: unknown device info "" [ 635.203663][T15954] CUSE: zero length info key specified [ 635.213554][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.358799][T15957] NILFS (nullb0): couldn't find nilfs on the device [ 635.402541][T15957] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 635.965886][T15957] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 636.121143][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.136712][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.190782][T15966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 637.201784][T15966] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 637.699946][T15849] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.770009][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3273'. [ 637.924680][T15849] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.721208][ T5827] net_ratelimit: 9 callbacks suppressed [ 639.721225][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.791268][T15996] erofs (device nbd0): cannot find valid erofs superblock [ 640.282516][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.291111][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.299738][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.337552][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.345761][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.353955][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.362201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.370312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.378528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.647116][T15849] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.746978][T16002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16002 comm=syz.0.3278 [ 640.798867][T15849] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.840133][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3279'. [ 640.965545][T16008] netlink: 'syz.1.3279': attribute type 10 has an invalid length. [ 640.973439][T16008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3279'. [ 640.993880][T16008] CUSE: unknown device info "" [ 641.000588][T16008] CUSE: zero length info key specified [ 641.957993][T15849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 641.977986][T15849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 642.032096][T15849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 642.745889][T16021] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 642.837085][T16021] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 642.942612][T15849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 643.187148][T15849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.221893][T15849] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.238577][T15536] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.245711][T15536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.269201][T15536] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.276339][T15536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.350861][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3288'. [ 644.370343][T15849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.396357][T16045] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.405310][T16045] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.413997][T16045] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.423391][T16045] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.514561][T15849] veth0_vlan: entered promiscuous mode [ 644.538190][T15849] veth1_vlan: entered promiscuous mode [ 644.560886][T16053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16053 comm=syz.0.3289 [ 644.595727][T15849] veth0_macvtap: entered promiscuous mode [ 644.604474][T15849] veth1_macvtap: entered promiscuous mode [ 644.630564][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.643589][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3291'. [ 644.644193][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.668321][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.679994][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.691065][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.702683][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.061439][ T975] net_ratelimit: 133 callbacks suppressed [ 645.061455][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.094376][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.105278][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.118762][T15849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.141256][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.149645][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.156259][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.169415][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.179540][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.195194][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.205193][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.220046][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.229944][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.240546][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.389833][T16063] overlayfs: failed to resolve './file1': -2 [ 645.395193][T15849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.444026][T15849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.453759][T15849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.462538][T15849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.471613][T15849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.712402][T16067] netlink: 'syz.4.3293': attribute type 10 has an invalid length. [ 645.720323][T16067] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3293'. [ 645.766272][T16068] CUSE: unknown device info "" [ 645.771307][T16068] CUSE: zero length info key specified [ 646.175031][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.386447][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.426770][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.019667][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.030273][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.116358][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.138144][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.215272][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.223393][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.418096][ T30] audit: type=1400 audit(1745236474.368:1033): avc: denied { create } for pid=16072 comm="syz.3.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 647.562612][T16085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.571254][T16085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.222191][T16090] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 648.647075][T16098] veth0_vlan: left promiscuous mode [ 648.656474][T16098] veth0_vlan: entered promiscuous mode [ 650.331251][ T5904] net_ratelimit: 263 callbacks suppressed [ 650.331268][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.345135][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.350917][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.418862][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.460697][T16118] overlayfs: failed to resolve './file1': -2 [ 651.819592][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.834996][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.860942][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.393446][ T5875] IPVS: starting estimator thread 0... [ 652.464655][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3309'. [ 652.514957][T16135] IPVS: using max 75 ests per chain, 180000 per kthread [ 652.827299][T16141] netlink: 'syz.0.3309': attribute type 10 has an invalid length. [ 652.835207][T16141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3309'. [ 652.849881][T16141] CUSE: unknown device info "" [ 652.854869][T16141] CUSE: zero length info key specified [ 652.864843][ T5909] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 652.994422][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.784981][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.821567][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.076911][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3311'. [ 654.214136][ T5909] usb 5-1: device descriptor read/64, error -71 [ 655.089830][T16157] netlink: 'syz.2.3311': attribute type 10 has an invalid length. [ 655.098200][T16157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3311'. [ 655.138217][ T5909] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 655.165991][T16158] CUSE: unknown device info "" [ 655.170961][T16158] CUSE: zero length info key specified [ 656.035300][T14129] net_ratelimit: 5 callbacks suppressed [ 656.035315][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.049560][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.161273][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.169863][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.207590][T16157] team0: Port device geneve0 added [ 657.190550][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 657.212996][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.745617][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.797378][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.195934][T16179] veth0_vlan: left promiscuous mode [ 658.203995][T16179] veth0_vlan: entered promiscuous mode [ 658.967517][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.013166][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.021427][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.225892][T16181] overlayfs: failed to resolve './file1': -2 [ 659.640691][T16190] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 659.648677][T16190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3320'. [ 659.712320][T16191] CUSE: unknown device info "" [ 659.717354][T16191] CUSE: zero length info key specified [ 660.224021][T16184] xt_ipcomp: unknown flags 12 [ 661.165531][ T5875] net_ratelimit: 8 callbacks suppressed [ 661.165547][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.405731][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.950557][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.953585][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.966758][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.421783][T16221] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 663.432940][T16221] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 663.758283][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.035190][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.070978][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.184645][T16231] NILFS (nullb0): couldn't find nilfs on the device [ 665.055310][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.063429][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.423965][ T5875] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 665.742443][T16249] overlayfs: failed to resolve './file1': -2 [ 665.835884][ T5875] usb 1-1: config 16 has an invalid interface number: 168 but max is 0 [ 665.865707][ T5875] usb 1-1: config 16 has no interface number 0 [ 665.902955][ T5875] usb 1-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 665.990503][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.044389][ T5875] HFC-S_USB 1-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 666.212077][ T5875] net_ratelimit: 7 callbacks suppressed [ 666.212093][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.227148][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.778631][ T5921] usb 1-1: USB disconnect, device number 13 [ 666.815157][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.224877][ T5875] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 667.259061][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.415967][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.700511][T16277] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 667.712778][T16277] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 668.386686][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.395069][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 668.397626][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.889643][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.904281][ T5875] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 668.914748][ T5875] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 668.922855][ T5875] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 668.931811][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 668.941492][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 668.960809][T16271] netlink: 'syz.3.3339': attribute type 10 has an invalid length. [ 668.968751][T16271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3339'. [ 668.984575][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 669.015085][T16279] CUSE: unknown device info "" [ 669.020083][T16279] CUSE: zero length info key specified [ 669.175208][ T5875] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 669.217390][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.260003][ T5875] usb 3-1: Product: syz [ 669.282369][ T5875] usb 3-1: Manufacturer: syz [ 669.304736][ T5875] usb 3-1: SerialNumber: syz [ 669.455668][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.463774][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.941539][ T5875] usb 3-1: config 0 descriptor?? [ 670.047782][ T5875] usb 3-1: can't set config #0, error -71 [ 670.055187][ T5875] usb 3-1: USB disconnect, device number 22 [ 670.212500][T16271] team0: Port device geneve0 added [ 670.268631][T16290] netlink: 'syz.1.3341': attribute type 10 has an invalid length. [ 670.276763][T16290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3341'. [ 670.980725][T16294] CUSE: unknown device info "" [ 670.994655][T16294] CUSE: zero length info key specified [ 671.124247][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3346'. [ 671.460143][T16297] net_ratelimit: 7 callbacks suppressed [ 671.460154][T16297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.473873][T16297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.482100][T16297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.495797][T16297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.503904][T16297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.512095][T16297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.520273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.528384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.536544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.544736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.670655][T16304] netlink: 'syz.0.3346': attribute type 10 has an invalid length. [ 671.680028][T16304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3346'. [ 671.709352][T16304] CUSE: unknown device info "" [ 671.714481][T16304] CUSE: zero length info key specified [ 676.225153][T16352] veth0_vlan: entered allmulticast mode [ 676.249231][T16352] veth0_vlan: left promiscuous mode [ 676.257197][T16352] veth0_vlan: entered promiscuous mode [ 677.092870][T16354] dummy0 speed is unknown, defaulting to 1000 [ 677.099205][ T5921] net_ratelimit: 264 callbacks suppressed [ 677.099218][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.610285][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.727988][T16354] dummy0 speed is unknown, defaulting to 1000 [ 677.756420][T16354] dummy0 speed is unknown, defaulting to 1000 [ 677.862882][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.374259][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.410980][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.435356][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.456944][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.561476][T16366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.571911][T16366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.729515][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.761698][T16366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.772012][T16366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.145049][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.457434][T16366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.468580][T16366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.536779][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.577313][T16366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.587610][T16366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.925528][T16366] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.933777][T16366] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.946692][T16366] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.955515][T16366] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.967794][T16366] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.975959][T16366] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.988071][T16366] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.996246][T16366] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.154410][T16354] infiniband syz2: set active [ 680.159200][ T5904] dummy0 speed is unknown, defaulting to 1000 [ 680.175151][T16354] infiniband syz2: added dummy0 [ 680.183477][T16354] syz2: rxe_create_cq: returned err = -12 [ 680.189336][T16354] infiniband syz2: Couldn't create ib_mad CQ [ 680.197349][T16354] infiniband syz2: Couldn't open port 1 [ 680.223705][T16354] RDS/IB: syz2: added [ 680.227999][T16354] smc: adding ib device syz2 with port count 1 [ 680.234170][T16354] smc: ib device syz2 port 1 has pnetid [ 680.327038][ T5904] dummy0 speed is unknown, defaulting to 1000 [ 680.339585][T16354] dummy0 speed is unknown, defaulting to 1000 [ 680.796635][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3363'. [ 680.880427][T16385] netlink: 'syz.4.3363': attribute type 10 has an invalid length. [ 680.888534][T16385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3363'. [ 680.904876][T16385] CUSE: unknown device info "" [ 680.909908][T16385] CUSE: zero length info key specified [ 681.854084][T16354] dummy0 speed is unknown, defaulting to 1000 [ 682.556314][ T5909] net_ratelimit: 5 callbacks suppressed [ 682.556331][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.614428][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.763659][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.772531][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.175748][ T3012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.185492][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.196186][T16354] dummy0 speed is unknown, defaulting to 1000 [ 684.207208][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.301473][T16406] netlink: 'syz.4.3369': attribute type 10 has an invalid length. [ 684.309360][T16406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3369'. [ 684.326013][T16406] CUSE: unknown device info "" [ 684.330989][T16406] CUSE: zero length info key specified [ 684.815312][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.127341][T16409] netlink: 'syz.0.3370': attribute type 10 has an invalid length. [ 685.135645][T16409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3370'. [ 685.247126][T16411] CUSE: unknown device info "" [ 685.252130][T16411] CUSE: zero length info key specified [ 685.474575][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.502892][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.626719][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.439097][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.452207][T16425] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 687.463695][T16425] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 687.786102][T13848] net_ratelimit: 6 callbacks suppressed [ 687.786116][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.834447][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.906607][T16426] netlink: 'syz.0.3372': attribute type 10 has an invalid length. [ 687.914439][T16426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3372'. [ 687.931262][T16426] CUSE: unknown device info "" [ 687.936655][T16426] CUSE: zero length info key specified [ 688.942081][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.183589][T16354] dummy0 speed is unknown, defaulting to 1000 [ 689.507679][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.903992][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.913199][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.037659][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.224362][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.233314][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.242111][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.964606][ T251] bridge_slave_1: left allmulticast mode [ 690.993564][ T251] bridge_slave_1: left promiscuous mode [ 691.076299][ T251] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.545489][ T251] bridge_slave_0: left allmulticast mode [ 691.564863][ T251] bridge_slave_0: left promiscuous mode [ 691.624924][ T251] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.696763][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 692.705510][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 692.717073][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 692.737405][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 692.758925][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 693.043207][T14129] net_ratelimit: 10 callbacks suppressed [ 693.043223][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.615195][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.995999][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.369819][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.657314][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.845223][ T5831] Bluetooth: hci3: command tx timeout [ 694.934851][T14129] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 694.965961][T16479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 694.977812][T16479] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 695.055846][ T251] team0: Port device geneve0 removed [ 695.089688][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.303052][T14129] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 695.345782][T14129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.376688][T14129] usb 4-1: Product: syz [ 695.384562][T14129] usb 4-1: Manufacturer: syz [ 695.396677][T14129] usb 4-1: SerialNumber: syz [ 695.415248][T14129] usb 4-1: config 0 descriptor?? [ 695.449200][ T251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.460379][ T251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.471334][ T251] bond0 (unregistering): (slave team0): Releasing backup interface [ 695.481651][ T251] bond0 (unregistering): Released all slaves [ 695.500248][T16354] dummy0 speed is unknown, defaulting to 1000 [ 695.642058][ T30] audit: type=1400 audit(1745236522.708:1034): avc: denied { read write } for pid=16472 comm="syz.3.3385" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 695.673322][ T30] audit: type=1400 audit(1745236522.708:1035): avc: denied { open } for pid=16472 comm="syz.3.3385" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 695.698043][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.713772][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.722195][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.731753][ T30] audit: type=1400 audit(1745236522.708:1036): avc: denied { read } for pid=16472 comm="syz.3.3385" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 695.758587][ T30] audit: type=1400 audit(1745236522.708:1037): avc: denied { open } for pid=16472 comm="syz.3.3385" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 695.828149][T16474] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 696.096082][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.914784][ T5831] Bluetooth: hci3: command tx timeout [ 697.231756][T16454] dummy0 speed is unknown, defaulting to 1000 [ 697.754413][T14129] usb 4-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 697.764753][T14129] f81604 4-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 697.780844][T14129] f81604 4-1:0.0: probe with driver f81604 failed with error -110 [ 697.912947][T14129] usb 4-1: USB disconnect, device number 22 [ 698.073623][T13848] net_ratelimit: 4 callbacks suppressed [ 698.073637][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.968762][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.985751][ T5831] Bluetooth: hci3: command tx timeout [ 699.054596][T16500] erofs (device nbd4): cannot find valid erofs superblock [ 699.065925][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.119504][T16354] dummy0 speed is unknown, defaulting to 1000 [ 699.135735][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.015073][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.047125][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.195140][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.316971][T16454] chnl_net:caif_netlink_parms(): no params data found [ 700.558745][ T251] hsr_slave_0: left promiscuous mode [ 700.573035][ T251] hsr_slave_1: left promiscuous mode [ 700.746033][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.778302][ T251] veth1_macvtap: left promiscuous mode [ 700.865038][ T251] veth0_macvtap: left promiscuous mode [ 700.871193][ T251] veth1_vlan: left promiscuous mode [ 700.876899][ T251] veth0_vlan: left promiscuous mode [ 701.055167][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.063793][ T5831] Bluetooth: hci3: command tx timeout [ 701.215576][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.225946][T16537] netlink: 'syz.3.3400': attribute type 10 has an invalid length. [ 701.233738][T16537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3400'. [ 701.281860][T16539] CUSE: unknown device info "" [ 701.306667][T16539] CUSE: zero length info key specified [ 702.033885][ T251] team0 (unregistering): Port device team_slave_1 removed [ 702.118010][ T251] team0 (unregistering): Port device team_slave_0 removed [ 702.277578][ T972] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 702.527394][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3400'. [ 702.571519][T16551] veth0_vlan: left promiscuous mode [ 702.578837][T16551] veth0_vlan: entered promiscuous mode [ 702.602257][T16552] dummy0 speed is unknown, defaulting to 1000 [ 702.618784][ T972] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 702.721396][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.750240][ T972] usb 1-1: Product: syz [ 702.754839][ T972] usb 1-1: Manufacturer: syz [ 702.759624][ T972] usb 1-1: SerialNumber: syz [ 702.811163][ T972] usb 1-1: config 0 descriptor?? [ 702.910638][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 703.091091][T16545] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 703.101179][ C1] net_ratelimit: 131 callbacks suppressed [ 703.101191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.119505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.165105][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.219856][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.774881][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.780920][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.973783][ T972] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 704.044377][ T972] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 704.053967][ T972] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 704.177037][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.187384][ T972] usb 1-1: USB disconnect, device number 14 [ 704.637863][T16454] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.663246][T16454] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.672461][T16454] bridge_slave_0: entered allmulticast mode [ 704.688653][T16454] bridge_slave_0: entered promiscuous mode [ 704.705596][T16454] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.742910][T16454] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.754327][T16454] bridge_slave_1: entered allmulticast mode [ 704.762162][T16454] bridge_slave_1: entered promiscuous mode [ 704.815506][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.843636][T16454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.883281][T16454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.132213][ T5876] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 705.134068][ T251] IPVS: stop unused estimator thread 0... [ 705.271304][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.296237][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.299458][T16454] team0: Port device team_slave_0 added [ 705.341803][T16454] team0: Port device team_slave_1 added [ 705.485686][T16454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.496273][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.515683][ T5876] usb 4-1: device descriptor read/64, error -71 [ 705.526205][T16454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.542067][T16454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.549406][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.998216][T16454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.085708][T16454] hsr_slave_0: entered promiscuous mode [ 706.091798][T16454] hsr_slave_1: entered promiscuous mode [ 706.098306][T16454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 706.106764][T16454] Cannot create hsr debugfs directory [ 706.124775][ T5876] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 706.903880][ T5876] usb 4-1: device descriptor read/64, error -71 [ 707.054947][ T5876] usb usb4-port1: attempt power cycle [ 707.371004][ T251] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.382126][ T251] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.536401][ T251] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.553846][ T251] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.698397][ T5876] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 707.748536][ T5876] usb 4-1: device descriptor read/8, error -71 [ 707.876453][ T251] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.887782][ T251] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.909634][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3418'. [ 708.085374][T16612] netlink: 'syz.4.3418': attribute type 10 has an invalid length. [ 708.093276][T16612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3418'. [ 708.322275][T16618] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 708.616696][ T5875] net_ratelimit: 6 callbacks suppressed [ 708.616711][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.632251][T16621] CUSE: unknown device info "" [ 708.637453][T16621] CUSE: zero length info key specified [ 708.745706][T16622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3420'. [ 709.084407][ T251] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.123868][ T251] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.868403][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.934848][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.968116][T16629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3423'. [ 710.058288][T16454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 711.005306][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.018958][T16454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 711.108796][T16643] netlink: 'syz.2.3423': attribute type 10 has an invalid length. [ 711.116848][T16643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3423'. [ 711.181467][T16644] CUSE: unknown device info "" [ 711.187081][T16644] CUSE: zero length info key specified [ 711.219119][T16645] overlayfs: failed to resolve './file0': -2 [ 711.489498][T16454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 711.685197][T16640] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 711.694169][T16454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 711.760553][ T251] bridge_slave_1: left allmulticast mode [ 711.784409][ T251] bridge_slave_1: left promiscuous mode [ 711.816260][ T251] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.872025][ T251] bridge_slave_0: left allmulticast mode [ 711.878396][ T251] bridge_slave_0: left promiscuous mode [ 711.884377][ T251] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.947065][T16650] erofs (device nbd2): cannot find valid erofs superblock [ 712.187061][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.246073][ T5909] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 712.384766][ T5909] usb 1-1: device descriptor read/64, error -71 [ 712.391439][ T251] team0: Port device geneve0 removed [ 712.501040][ T251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.513330][ T251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.527256][ T251] bond0 (unregistering): Released all slaves [ 712.612464][T16454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.629567][ T5909] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 712.660320][T16454] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.702682][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.709843][ T4167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.799684][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.806803][ T4167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.878156][T16666] netlink: 'syz.4.3432': attribute type 10 has an invalid length. [ 712.886218][T16666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3432'. [ 712.962864][T16668] CUSE: unknown device info "" [ 712.968027][T16668] CUSE: zero length info key specified [ 713.419157][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.436431][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3432'. [ 713.582502][ T5909] usb 1-1: device descriptor read/64, error -71 [ 713.591609][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.716717][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.804539][ T5909] usb usb1-port1: attempt power cycle [ 715.616380][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.646845][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.180075][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.188634][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.198249][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.212535][T16454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 716.233135][T16454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 716.285119][T16683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3434'. [ 716.510925][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.521713][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.548094][T16694] overlayfs: failed to resolve './file0': -2 [ 717.813913][T16454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.430491][T16723] erofs (device nbd4): cannot find valid erofs superblock [ 718.479272][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.587297][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.651931][ T251] hsr_slave_0: left promiscuous mode [ 718.663260][ T251] hsr_slave_1: left promiscuous mode [ 718.800889][ T251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.850253][ T251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.885650][ T251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.005618][ T251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.063314][ T251] veth1_macvtap: left promiscuous mode [ 719.083770][ T251] veth0_macvtap: left promiscuous mode [ 719.115918][ T251] veth1_vlan: left promiscuous mode [ 719.144135][ T251] veth0_vlan: left promiscuous mode [ 720.170857][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.178998][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.216399][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.360125][T16755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.371055][T16755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.379348][T16755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.395025][T16755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.403175][T16755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.411403][T16755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.419592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.789117][ T251] team0 (unregistering): Port device team_slave_1 removed [ 722.835474][ T251] team0 (unregistering): Port device team_slave_0 removed [ 724.020192][T16765] overlayfs: failed to resolve './file0': -2 [ 724.291519][T15536] smc: removing ib device syz2 [ 724.751899][ T5876] dummy0 speed is unknown, defaulting to 1000 [ 724.758815][ T5876] syz2: Port: 1 Link DOWN [ 724.761169][ T5875] dummy0 speed is unknown, defaulting to 1000 [ 725.108671][T16454] veth0_vlan: entered promiscuous mode [ 725.142288][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3454'. [ 725.297924][T16454] veth1_vlan: entered promiscuous mode [ 725.428999][T16454] veth0_macvtap: entered promiscuous mode [ 726.122744][ T5921] net_ratelimit: 127 callbacks suppressed [ 726.122761][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.421879][T16454] veth1_macvtap: entered promiscuous mode [ 726.455867][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.848910][T16785] netlink: 'syz.4.3454': attribute type 10 has an invalid length. [ 726.857373][T16785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3454'. [ 726.919571][T16796] CUSE: unknown device info "" [ 726.924574][T16796] CUSE: zero length info key specified [ 727.153261][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.393052][T16454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.507732][T16454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.518986][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.648809][T16454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.725106][ T5875] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 728.771918][T16454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.893133][T16454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.915976][ T5875] usb 4-1: device descriptor read/64, error -71 [ 729.127004][T16454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.171568][T16454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.275513][T16454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.307396][T16809] input: syz1 as /devices/virtual/input/input9 [ 729.474385][ T5875] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 729.524286][ T30] audit: type=1400 audit(1745236556.578:1038): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2801 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 729.640459][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.680611][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.695815][T16454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.909600][T16454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.919311][ T5875] usb 4-1: device descriptor read/64, error -71 [ 729.930263][T16454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.944855][T16454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.972143][T16454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.717735][ T5875] usb usb4-port1: attempt power cycle [ 730.735907][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.924093][T16454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.934588][T16454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.944411][T16454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.957744][T16454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.972353][T16454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.992661][T16454] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.024712][T16454] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.075764][ T5875] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 731.179739][T16454] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.195883][T16454] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.333450][ T5875] usb 4-1: device descriptor read/8, error -71 [ 732.541637][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.899634][T16828] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 734.109593][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 734.116415][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.142540][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.166390][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.190835][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.255138][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.274829][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.535416][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.580109][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.424857][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.446213][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3472'. [ 737.142271][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.174064][T16882] netlink: 'syz.4.3472': attribute type 10 has an invalid length. [ 737.182221][T16882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3472'. [ 737.200337][T16882] CUSE: unknown device info "" [ 737.205506][T16882] CUSE: zero length info key specified [ 737.456173][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.231965][ T5909] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 738.375107][ T5909] usb 5-1: device descriptor read/64, error -71 [ 739.131663][ T5909] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 739.140626][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.185874][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.771948][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.974887][ T5909] usb 5-1: device descriptor read/64, error -71 [ 741.121260][T16913] /dev/nullb0: Can't open blockdev [ 741.371123][ T5909] usb usb5-port1: attempt power cycle [ 741.427199][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.769827][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.482791][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.211325][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.220276][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.231691][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.524229][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.532568][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.582873][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.809940][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3485'. [ 745.302211][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.589734][T16945] netlink: 'syz.0.3485': attribute type 10 has an invalid length. [ 745.599220][T16945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3485'. [ 745.616313][T16945] CUSE: unknown device info "" [ 745.621345][T16945] CUSE: zero length info key specified [ 745.886640][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.336376][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.926589][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.932904][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.947390][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.280825][ T975] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 747.398170][T16965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3491'. [ 747.439827][ T975] usb 1-1: device descriptor read/64, error -71 [ 747.559810][T16966] netlink: 'syz.5.3491': attribute type 10 has an invalid length. [ 747.567659][T16966] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3491'. [ 747.592640][T16966] team0: Port device geneve0 added [ 747.652626][T16966] CUSE: unknown device info "" [ 747.657701][T16966] CUSE: zero length info key specified [ 748.776909][ T975] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 749.294764][ C1] net_ratelimit: 137 callbacks suppressed [ 749.294782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.308948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.546080][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.563117][ T975] usb 1-1: device descriptor read/64, error -71 [ 749.568690][T15536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.583150][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.597409][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.681616][ T975] usb usb1-port1: attempt power cycle [ 750.336369][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.675578][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.689420][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.796326][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.159554][T17016] NILFS (nullb0): couldn't find nilfs on the device [ 752.700935][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3503'. [ 752.941288][T17026] netlink: 'syz.2.3503': attribute type 10 has an invalid length. [ 752.949333][T17026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3503'. [ 754.564261][T17044] NILFS (nullb0): couldn't find nilfs on the device [ 755.114801][T13848] net_ratelimit: 12 callbacks suppressed [ 755.114819][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.129520][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.280898][ T975] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 755.293414][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.788377][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.827454][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.965238][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 756.205994][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.225339][ T975] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.315371][ T975] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 756.346725][ T975] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 756.358814][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 756.483157][ T975] usb 6-1: SerialNumber: syz [ 756.502820][ T975] cdc_acm 6-1:1.0: Zero length descriptor references [ 756.509747][ T975] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 757.128828][T17066] NILFS (nullb0): couldn't find nilfs on the device [ 757.140264][T17066] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 757.187483][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.468530][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.479290][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.495655][T17068] netlink: 'syz.3.3511': attribute type 10 has an invalid length. [ 757.503566][T17068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3511'. [ 757.519533][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.602456][T17069] CUSE: unknown device info "" [ 757.607490][T17069] CUSE: zero length info key specified [ 758.449064][ T58] usb 6-1: USB disconnect, device number 2 [ 758.691327][T17078] input: syz1 as /devices/virtual/input/input10 [ 759.048915][T17082] netlink: 'syz.4.3515': attribute type 10 has an invalid length. [ 759.056820][T17082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3515'. [ 759.078214][T17082] CUSE: unknown device info "" [ 759.083240][T17082] CUSE: zero length info key specified [ 760.495014][ T975] net_ratelimit: 2 callbacks suppressed [ 760.495031][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.498862][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.520402][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.531771][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.907637][T17093] NILFS (nullb0): couldn't find nilfs on the device [ 760.952417][T17093] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 761.753347][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.763680][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.873902][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.027531][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.075686][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.568850][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.183918][T17141] netlink: 'syz.3.3530': attribute type 10 has an invalid length. [ 765.191950][T17141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3530'. [ 765.203717][T17141] CUSE: unknown device info "" [ 765.208682][T17141] CUSE: zero length info key specified [ 765.628946][ T58] net_ratelimit: 5 callbacks suppressed [ 765.628961][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.176180][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.969257][T17159] erofs (device nbd2): cannot find valid erofs superblock [ 766.988651][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.998075][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.011015][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.195363][T17161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.650887][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.661065][T17161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.695860][T17161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.747557][T17172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.005030][ T975] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 768.175999][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 768.184016][ T975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.204990][ T975] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 768.238231][ T975] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 768.247733][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 768.264711][ T975] usb 3-1: SerialNumber: syz [ 768.292325][ T975] cdc_acm 3-1:1.0: Zero length descriptor references [ 768.306173][ T975] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 768.880115][ T975] usb 3-1: USB disconnect, device number 23 [ 769.322499][T17186] input: syz0 as /devices/virtual/input/input11 [ 769.894940][ T975] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 770.100346][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 770.110026][ T975] usb 5-1: config 1 interface 0 has no altsetting 0 [ 770.122891][ T975] usb 5-1: language id specifier not provided by device, defaulting to English [ 770.147050][ T975] usb 5-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.40 [ 770.158476][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.168405][ T975] usb 5-1: Product: syz [ 770.173146][ T975] usb 5-1: Manufacturer: 큸 [ 770.182379][ T975] usb 5-1: SerialNumber: syz [ 770.859864][ T975] usbhid 5-1:1.0: can't add hid device: -71 [ 770.873244][ T975] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 770.892184][ T975] usb 5-1: USB disconnect, device number 9 [ 770.895051][ T5875] net_ratelimit: 132 callbacks suppressed [ 770.895062][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.143343][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.682480][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.870955][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.842590][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.850946][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.859054][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.859123][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.877918][T17221] erofs (device nbd0): cannot find valid erofs superblock [ 773.042386][T17222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.119243][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.189226][T14129] net_ratelimit: 136 callbacks suppressed [ 776.189239][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.349378][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.363443][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.606233][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.674079][T17267] netlink: 'syz.5.3557': attribute type 10 has an invalid length. [ 776.681986][T17267] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3557'. [ 776.745279][T17268] CUSE: unknown device info "" [ 776.750270][T17268] CUSE: zero length info key specified [ 777.601588][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.694919][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.703805][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.711909][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.264298][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.272626][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.462272][ T972] net_ratelimit: 7 callbacks suppressed [ 781.462290][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.476127][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.484349][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.748732][T17316] NILFS (nullb0): couldn't find nilfs on the device [ 782.283633][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.335898][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.345469][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.505284][T17323] netlink: 'syz.0.3570': attribute type 10 has an invalid length. [ 782.513159][T17323] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3570'. [ 782.529474][T17323] CUSE: unknown device info "" [ 782.534459][T17323] CUSE: zero length info key specified [ 782.828373][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.836588][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.844801][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.461415][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.612437][T17324] overlayfs: missing 'lowerdir' [ 784.708243][T17345] NILFS (nullb0): couldn't find nilfs on the device [ 784.752420][T17345] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 785.339109][T17345] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 786.467145][ T5875] net_ratelimit: 12 callbacks suppressed [ 786.467162][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.476669][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.481150][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.502050][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.504877][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.525677][T17357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.534070][T17357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.542445][T17357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.559087][T17357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.567285][T17357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.897674][T17374] erofs (device nbd0): cannot find valid erofs superblock [ 788.627818][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3582'. [ 788.971579][T17383] netlink: 'syz.5.3582': attribute type 10 has an invalid length. [ 788.979482][T17383] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3582'. [ 788.999183][T17383] CUSE: unknown device info "" [ 789.004196][T17383] CUSE: zero length info key specified [ 789.271440][T17385] erofs (device nbd0): cannot find valid erofs superblock [ 791.511877][ T5875] net_ratelimit: 280 callbacks suppressed [ 791.511893][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.526815][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.545162][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.553416][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.622198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.646952][T17403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3588'. [ 791.723568][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.295272][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.295361][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.311588][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.983548][ T972] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 793.036529][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.389078][T17420] NILFS (nullb0): couldn't find nilfs on the device [ 793.433915][T17420] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 793.685394][ T972] usb 4-1: device descriptor read/64, error -71 [ 794.099968][T17420] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 794.386189][T17422] veth0_vlan: entered allmulticast mode [ 794.584400][T17422] veth0_vlan: left promiscuous mode [ 794.746267][T17422] veth0_vlan: entered promiscuous mode [ 796.425986][T17443] NILFS (nullb0): couldn't find nilfs on the device [ 796.438597][T17443] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 796.839892][ T972] net_ratelimit: 150 callbacks suppressed [ 796.839908][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.840275][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.845752][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.877967][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.885348][T12447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.894124][T12447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.962599][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.975010][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.637662][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.646144][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.763106][T17464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3603'. [ 799.614804][ T975] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 799.820913][T17480] erofs (device nbd0): cannot find valid erofs superblock [ 800.264765][ T975] usb 4-1: device descriptor read/64, error -71 [ 800.516765][ T975] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 801.996814][ T5876] net_ratelimit: 31 callbacks suppressed [ 801.996830][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.539064][T17503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.547809][T17503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.556519][T17503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.599416][T17503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.607817][T17503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.616269][T17503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.624484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.632890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.641151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.880543][ T975] usb 4-1: device descriptor read/64, error -71 [ 803.012655][ T975] usb usb4-port1: attempt power cycle [ 805.915844][T17533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3617'. [ 806.528172][T17548] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 807.061386][ T5827] net_ratelimit: 158 callbacks suppressed [ 807.061401][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.152110][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.204275][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.212860][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.221458][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.412932][T17558] overlayfs: missing 'lowerdir' [ 807.532585][T17559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.541298][T17559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.550590][T17559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.607414][T17559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.615701][T17559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.081451][T17562] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 808.874268][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.893759][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.047611][T14129] IPVS: starting estimator thread 0... [ 809.066710][T17572] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3627'. [ 809.167732][T17573] IPVS: using max 77 ests per chain, 184800 per kthread [ 810.228337][T17588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3632'. [ 810.655001][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 810.847326][T17589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3631'. [ 810.911412][T17592] netlink: 'syz.3.3632': attribute type 10 has an invalid length. [ 810.919388][T17592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3632'. [ 810.990001][T17593] CUSE: unknown device info "" [ 810.995097][T17593] CUSE: zero length info key specified [ 812.175521][ T5827] net_ratelimit: 417 callbacks suppressed [ 812.175538][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.187420][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.254960][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.282152][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.297896][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.311527][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.320319][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.335053][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.343222][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.353711][ T4167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.435090][T17597] netlink: 'syz.0.3633': attribute type 10 has an invalid length. [ 812.442972][T17597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3633'. [ 812.484812][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3633'. [ 812.501197][T17595] CUSE: unknown device info "" [ 812.506298][T17595] CUSE: zero length info key specified [ 813.561565][T17604] fuse: Bad value for 'fd' [ 816.155383][T17630] input: syz1 as /devices/virtual/input/input12 [ 816.937092][T17649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3646'. [ 817.195352][T17653] overlayfs: missing 'lowerdir' [ 817.238591][T17653] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 817.566391][ T5921] net_ratelimit: 414 callbacks suppressed [ 817.566409][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.581566][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.589992][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.598269][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.610678][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.507466][T17656] NILFS (nullb0): couldn't find nilfs on the device [ 818.519959][T17656] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 818.750625][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.758024][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.758853][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.766957][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.774950][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.075601][T17669] erofs (device nbd4): cannot find valid erofs superblock [ 819.119019][T17656] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 819.704094][T17677] fuse: Invalid rootmode [ 820.414095][T17686] NILFS (nullb0): couldn't find nilfs on the device [ 821.393249][T17685] NILFS (nullb0): couldn't find nilfs on the device [ 821.409726][T17685] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 821.701386][T17685] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 823.332541][ T972] net_ratelimit: 161 callbacks suppressed [ 823.332558][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.354535][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.364843][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.373015][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.382431][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.348851][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.368620][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.377215][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.557884][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.574811][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.692938][T17727] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 826.880035][T17731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.353012][T16937] net_ratelimit: 161 callbacks suppressed [ 828.353028][T16937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.379759][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.392160][T17757] fuse: Invalid rootmode [ 828.408625][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.505432][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.664765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.816705][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.825363][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.834002][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.988976][T16937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.990941][T17749] veth0_vlan: left promiscuous mode [ 829.012482][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.060777][T17749] veth0_vlan: entered promiscuous mode [ 830.547086][T17784] erofs (device nbd3): cannot find valid erofs superblock [ 831.804279][T17792] erofs (device nbd2): cannot find valid erofs superblock [ 831.902692][T17798] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 832.973999][T17811] /dev/nullb0: Can't open blockdev [ 833.006641][T17811] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 833.356058][T17169] net_ratelimit: 291 callbacks suppressed [ 833.356071][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.663535][T17799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.229911][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.232471][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.247580][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.261900][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.264126][T16937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.272394][T17811] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 834.361161][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.442617][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.559820][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.828365][T17819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3682'. [ 835.122318][T17823] fuse: Invalid rootmode [ 835.262115][T17825] netlink: 'syz.5.3682': attribute type 10 has an invalid length. [ 835.270273][T17825] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3682'. [ 835.287232][T17825] CUSE: unknown device info "" [ 835.292344][T17825] CUSE: zero length info key specified [ 836.832276][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3688'. [ 838.029535][T17840] veth0_vlan: left promiscuous mode [ 838.035639][T17840] veth0_vlan: entered promiscuous mode [ 838.480942][T17826] net_ratelimit: 154 callbacks suppressed [ 838.480954][T17826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.572780][T17849] netlink: 'syz.2.3688': attribute type 10 has an invalid length. [ 838.580955][T17849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3688'. [ 838.596492][T17849] CUSE: unknown device info "" [ 838.601520][T17849] CUSE: zero length info key specified [ 839.056745][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.061376][T17826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.065074][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.102390][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.120919][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.121210][T17826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.129175][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.162667][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.171706][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.319440][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3693'. [ 840.427318][T17872] NILFS (nullb0): couldn't find nilfs on the device [ 840.442921][T17872] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 841.329001][T17865] netlink: 'syz.0.3693': attribute type 10 has an invalid length. [ 841.337640][T17865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3693'. [ 841.362086][T17865] CUSE: unknown device info "" [ 841.367056][T17865] CUSE: zero length info key specified [ 841.402871][T17872] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 842.052905][T17882] veth0_vlan: left promiscuous mode [ 842.069224][T17882] veth0_vlan: entered promiscuous mode [ 842.501448][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3695'. [ 843.260814][T17888] netlink: 'syz.5.3695': attribute type 10 has an invalid length. [ 843.268950][T17888] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3695'. [ 843.287612][T17888] CUSE: unknown device info "" [ 843.292645][T17888] CUSE: zero length info key specified [ 843.559815][T13996] net_ratelimit: 159 callbacks suppressed [ 843.559833][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.014746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.023390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.111445][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.120625][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.134597][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.142851][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.159210][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.190607][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.686057][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.759742][T17892] fuse: Bad value for 'rootmode' [ 845.001149][T17899] netlink: 'syz.4.3701': attribute type 10 has an invalid length. [ 845.009078][T17899] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3701'. [ 845.091285][T17900] CUSE: unknown device info "" [ 845.096498][T17900] CUSE: zero length info key specified [ 845.134731][T13996] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 845.253649][T17894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3701'. [ 845.573169][T17904] overlayfs: missing 'lowerdir' [ 845.631113][T17904] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 847.204699][T13996] usb 6-1: Using ep0 maxpacket: 16 [ 847.846312][T13996] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 847.854982][T13996] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 847.863059][T13996] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 847.872586][T13996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 847.897586][T13996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 848.112323][T13996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 848.133052][T13996] usb 6-1: string descriptor 0 read error: -71 [ 848.941844][ T972] net_ratelimit: 23 callbacks suppressed [ 848.941861][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.955836][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.963988][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.964128][T13996] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 848.972149][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.989474][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.989640][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.447575][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.459818][T13996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.493110][T17910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.493133][T13996] usb 6-1: config 0 descriptor?? [ 849.501393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.709176][T17915] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.732023][T13996] usb 6-1: can't set config #0, error -71 [ 850.677238][T17924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.697972][T13996] usb 6-1: USB disconnect, device number 3 [ 850.862230][T17915] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.383298][T17915] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.276618][T17915] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.347767][T17915] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.360106][T17915] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.372755][T17915] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.385554][T17915] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.947388][ T5921] net_ratelimit: 284 callbacks suppressed [ 853.947405][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.963971][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.175101][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.183318][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.191484][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.199623][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.211107][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.255709][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.263942][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.272339][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.367104][T17965] fuse: Bad value for 'rootmode' [ 854.506224][T17968] NILFS (nullb0): couldn't find nilfs on the device [ 854.860846][T16769] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 855.105208][T16769] usb 3-1: Using ep0 maxpacket: 16 [ 855.251657][T16769] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 855.454808][T16769] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 855.553631][T16769] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 855.599034][T16769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 855.624706][T16769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 855.657849][T16769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 855.681078][T16769] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 855.697856][T16769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.710125][T16769] usb 3-1: Product: syz [ 855.794386][T16769] usb 3-1: Manufacturer: syz [ 855.799553][T16769] usb 3-1: SerialNumber: syz [ 855.826545][T16769] usb 3-1: config 0 descriptor?? [ 855.835766][T16769] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 855.843464][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 855.851512][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 855.860545][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 855.868494][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 856.384765][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 856.394046][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 856.402107][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 856.415951][T16769] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 856.426719][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 856.436423][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 856.454203][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 856.470369][T16769] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 856.483494][T16769] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 857.275409][T16769] usb 3-1: USB disconnect, device number 24 [ 857.376680][T16769] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 858.556546][T16769] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 858.566458][T16769] keyspan 3-1:0.0: device disconnected [ 859.033773][T18000] net_ratelimit: 155 callbacks suppressed [ 859.033792][T18000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.158426][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.213220][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.907801][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.916416][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.924708][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.932951][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.029389][T16769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.037496][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.263445][T18024] NILFS (nullb0): couldn't find nilfs on the device [ 860.521095][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.857781][T18019] netlink: 'syz.2.3729': attribute type 10 has an invalid length. [ 860.865734][T18019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3729'. [ 860.881818][T18019] CUSE: unknown device info "" [ 860.886828][T18019] CUSE: zero length info key specified [ 862.376529][T16937] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 862.899382][T16937] usb 3-1: Using ep0 maxpacket: 16 [ 862.943946][T16937] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 863.017119][T16937] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 863.124254][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3737'. [ 863.149998][T16937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 863.184743][T16937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 863.194445][T16937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 863.231334][T16937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 863.681900][T18055] netlink: 'syz.0.3737': attribute type 10 has an invalid length. [ 863.689798][T18055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3737'. [ 863.713819][T16937] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 863.723309][T16937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.169079][T13996] net_ratelimit: 31 callbacks suppressed [ 864.169094][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.218124][T18061] CUSE: unknown device info "" [ 864.223095][T18061] CUSE: zero length info key specified [ 864.441815][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.450650][T16769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.524006][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.579210][T16937] usb 3-1: Product: syz [ 864.583965][T16937] usb 3-1: Manufacturer: syz [ 864.588656][T16937] usb 3-1: SerialNumber: syz [ 864.609034][T16769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.620485][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.629512][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.779752][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.780567][T16937] usb 3-1: config 0 descriptor?? [ 864.792690][T16769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.829666][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.338084][T18068] erofs (device nbd3): cannot find valid erofs superblock [ 865.753266][T16937] usb 3-1: can't set config #0, error -71 [ 865.766425][T16937] usb 3-1: USB disconnect, device number 25 [ 866.067646][T18089] NILFS (nullb0): couldn't find nilfs on the device [ 866.785608][T18093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3747'. [ 866.946728][T18097] netlink: 'syz.2.3747': attribute type 10 has an invalid length. [ 866.954738][T18097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3747'. [ 866.980284][T18097] CUSE: unknown device info "" [ 866.985593][T18097] CUSE: zero length info key specified [ 868.075879][T18103] /dev/nullb0: Can't open blockdev [ 868.784832][T16769] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 869.404768][T16769] usb 4-1: Using ep0 maxpacket: 16 [ 869.454587][T16769] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 869.543873][T16769] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 869.588797][T16769] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 869.689431][T16769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 869.788145][T16769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 869.850040][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.892376][T16769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 869.938563][ T5827] net_ratelimit: 35 callbacks suppressed [ 869.938579][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.952672][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.964169][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.040231][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.268431][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.276775][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.285332][T16937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.287500][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.301599][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.348123][T18113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3752'. [ 870.633609][T16769] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 871.196131][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.211675][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.221937][T16769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.230287][T16769] usb 4-1: Product: syz [ 871.234765][T16769] usb 4-1: Manufacturer: syz [ 871.240187][T16769] usb 4-1: SerialNumber: syz [ 871.248840][T16769] usb 4-1: config 0 descriptor?? [ 871.651219][T18126] erofs (device nbd2): cannot find valid erofs superblock [ 872.296505][T16769] usb 4-1: can't set config #0, error -71 [ 872.305018][T16769] usb 4-1: USB disconnect, device number 36 [ 872.853865][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3758'. [ 873.085812][T18141] netlink: 'syz.3.3758': attribute type 10 has an invalid length. [ 873.093672][T18141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3758'. [ 873.110115][T18141] CUSE: unknown device info "" [ 873.115114][T18141] CUSE: zero length info key specified [ 875.115656][T13848] net_ratelimit: 33 callbacks suppressed [ 875.115673][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.130659][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.139390][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.162935][T18162] NILFS (nullb0): couldn't find nilfs on the device [ 875.177482][T18162] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 875.856788][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.859854][T18166] input: syz1 as /devices/virtual/input/input13 [ 875.870264][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.871684][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.907888][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.045188][T18162] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 876.385352][T18175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.393577][T18175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.401867][T18175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.234853][T13848] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 878.424838][T13848] usb 5-1: Using ep0 maxpacket: 16 [ 878.433311][T13848] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 878.450710][T13848] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 878.475024][T13848] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 878.594705][ T5827] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 878.609450][T13848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 878.628179][T13848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 878.652759][T13848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 878.806320][T18196] erofs (device nbd3): cannot find valid erofs superblock [ 879.306641][T13848] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 879.322563][T13848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.457366][T13848] usb 5-1: Product: syz [ 879.461600][T13848] usb 5-1: Manufacturer: syz [ 879.482140][T13848] usb 5-1: SerialNumber: syz [ 879.618422][T13848] usb 5-1: config 0 descriptor?? [ 879.701495][T13848] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 879.783542][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 879.826394][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 879.886060][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 879.998675][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 880.006410][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 880.013979][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 880.025085][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 880.034500][T13848] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 880.046403][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 880.054517][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 880.064101][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 880.072117][T13848] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 880.081430][T13848] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 880.093209][T13848] usb 5-1: USB disconnect, device number 10 [ 880.104484][T13848] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 880.144392][T13848] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 880.254954][T13996] net_ratelimit: 285 callbacks suppressed [ 880.254972][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.294129][T13848] keyspan 5-1:0.0: device disconnected [ 880.296476][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.335352][T16769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.338728][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.343549][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.360730][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.369132][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.256200][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.265290][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.376761][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.897284][T18233] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 881.908399][T18233] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 883.484559][T18239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3782'. [ 884.620890][T18250] netlink: 'syz.2.3782': attribute type 10 has an invalid length. [ 884.628808][T18250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3782'. [ 884.832742][T18252] erofs (device nbd0): cannot find valid erofs superblock [ 885.454955][T14129] net_ratelimit: 30 callbacks suppressed [ 885.454977][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.468910][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.545016][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.624892][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.633082][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.651528][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.784980][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.955239][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3786'. [ 886.056746][T18262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.065367][T18262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.074070][T18262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.076818][T18269] netlink: 'syz.0.3786': attribute type 10 has an invalid length. [ 887.084818][T18269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3786'. [ 887.104292][T18269] CUSE: unknown device info "" [ 887.109599][T18269] CUSE: zero length info key specified [ 889.226743][T18299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3794'. [ 890.324430][T18299] netlink: 'syz.0.3794': attribute type 10 has an invalid length. [ 890.332271][T18299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3794'. [ 890.348808][T18299] CUSE: unknown device info "" [ 890.353749][T18299] CUSE: zero length info key specified [ 890.741156][ T5827] net_ratelimit: 290 callbacks suppressed [ 890.741172][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.824748][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.855456][T18296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.863871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.021353][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.021546][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.033588][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.045947][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.078016][T18305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.086636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.874400][T18334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 892.885602][T18334] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 896.657202][ T975] net_ratelimit: 294 callbacks suppressed [ 896.657219][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.658135][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.663044][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.807541][T18361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.815871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.836793][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.094899][T17826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.106361][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.123317][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.124331][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.512993][T18382] fuse: Unknown parameter 'group_i00000000000000000000' [ 901.664753][ C1] net_ratelimit: 299 callbacks suppressed [ 901.664773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.739027][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.749127][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.758515][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.767131][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.775363][T16769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.867037][T17826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.932884][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3824'. [ 902.414847][T17826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.574730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.583547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.665724][T18432] netlink: 'syz.4.3824': attribute type 10 has an invalid length. [ 902.673640][T18432] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3824'. [ 902.821510][T18432] CUSE: unknown device info "" [ 902.826648][T18432] CUSE: zero length info key specified [ 903.063718][T18435] fuse: Unknown parameter 'group_i00000000000000000000' [ 907.109091][ T975] net_ratelimit: 173 callbacks suppressed [ 907.109107][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.381024][T18485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3838'. [ 907.509110][T18487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.517402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.548224][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.809029][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.829668][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.837878][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.849837][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.858051][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.080295][T18488] netlink: 'syz.2.3838': attribute type 10 has an invalid length. [ 908.088174][T18488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3838'. [ 908.110156][T18488] CUSE: unknown device info "" [ 908.115121][T18488] CUSE: zero length info key specified [ 908.588281][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.847242][T18505] input: syz1 as /devices/virtual/input/input15 [ 910.667746][T18507] veth0_vlan: left promiscuous mode [ 910.673778][T18507] veth0_vlan: entered promiscuous mode [ 912.175056][T17169] net_ratelimit: 156 callbacks suppressed [ 912.175074][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.189103][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.273911][T18525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.282188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.391211][T18525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.650087][T18520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.659233][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.688681][T18520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.734964][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.743220][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.170109][T18543] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3850'. [ 915.574755][ T975] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 915.824744][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 915.831678][ T975] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.843115][ T975] usb 3-1: config 0 interface 0 has no altsetting 0 [ 915.850111][ T975] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 916.193797][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.270716][ T975] usb 3-1: config 0 descriptor?? [ 916.955247][T18554] netlink: 'syz.2.3853': attribute type 1 has an invalid length. [ 917.155326][ T975] usbhid 3-1:0.0: can't add hid device: -71 [ 917.161547][ T975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 917.216220][T18582] erofs (device nbd3): cannot find valid erofs superblock [ 917.239163][T18582] net_ratelimit: 35 callbacks suppressed [ 917.239184][T18582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.274212][ T975] usb 3-1: USB disconnect, device number 26 [ 917.565255][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.573460][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.581682][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.589870][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.598088][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.631760][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.935063][T18590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.943610][T18590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.952377][T18590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.486837][T18606] NILFS (nullb0): couldn't find nilfs on the device [ 919.533088][T18606] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 919.886087][T18606] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 921.129578][T18622] NILFS (nullb0): couldn't find nilfs on the device [ 921.186436][T18622] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 921.596070][T18616] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 921.796763][T14129] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 921.958167][T14129] usb 3-1: Using ep0 maxpacket: 16 [ 921.978635][T14129] usb 3-1: config 1 has an invalid descriptor of length 183, skipping remainder of the config [ 922.404763][ C0] net_ratelimit: 288 callbacks suppressed [ 922.404781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.418915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.570505][T18629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.712490][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.720742][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.728915][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.737195][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.935572][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.943849][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.952549][T17826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.961247][T14129] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 922.972407][T14129] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57408, setting to 1024 [ 923.045260][T14129] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 923.104436][T14129] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 923.114027][T14129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 923.886261][T14129] usb 3-1: SerialNumber: syz [ 923.915260][T14129] cdc_acm 3-1:1.0: skipping garbage [ 923.956928][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3874'. [ 923.967823][T18656] input: syz0 as /devices/virtual/input/input16 [ 924.814767][T14129] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 925.386478][ T972] usb 3-1: USB disconnect, device number 27 [ 925.815518][T18658] netlink: 'syz.3.3874': attribute type 10 has an invalid length. [ 925.823654][T18658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3874'. [ 925.841508][T18658] CUSE: unknown device info "" [ 925.846521][T18658] CUSE: zero length info key specified [ 926.300205][T14129] usb 5-1: Using ep0 maxpacket: 32 [ 926.313223][T14129] usb 5-1: config 1 interface 0 has no altsetting 0 [ 926.343011][T14129] usb 5-1: language id specifier not provided by device, defaulting to English [ 926.363425][T14129] usb 5-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.40 [ 926.383212][T14129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.620835][T18673] veth0_vlan: left promiscuous mode [ 926.627356][T18673] veth0_vlan: entered promiscuous mode [ 926.838240][T14129] usb 5-1: Product: syz [ 927.329771][T14129] usb 5-1: Manufacturer: 큸 [ 927.335468][T14129] usb 5-1: SerialNumber: syz [ 927.515366][T14129] usb 5-1: can't set config #1, error -71 [ 927.516877][ T972] net_ratelimit: 33 callbacks suppressed [ 927.516889][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.527930][T14129] usb 5-1: USB disconnect, device number 11 [ 927.626315][T18684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.093671][T17826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.105742][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.335538][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.344192][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.352614][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.563054][T17169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.524862][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.533049][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.219862][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.226762][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.895521][T18721] page: refcount:3 mapcount:0 mapping:ffff888023cdeff8 index:0x2 pfn:0x5e99a [ 931.904341][T18721] memcg:ffff888031494000 [ 931.908612][T18721] aops:def_blk_aops ino:fa00000 [ 931.913460][T18721] flags: 0xfff60000000039(locked|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 931.922839][T18721] raw: 00fff60000000039 ffffea00017a66c8 ffff88807f9832e0 ffff888023cdeff8 [ 931.931439][T18721] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff888031494000 [ 931.940107][T18721] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 931.948469][T18721] page_owner tracks the page as allocated [ 931.954215][T18721] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 18720, tgid 18720 (syz.5.3891), ts 931757965679, free_ts 859247876709 [ 931.975350][T18721] post_alloc_hook+0x181/0x1b0 [ 931.980137][T18721] get_page_from_freelist+0x135c/0x3920 [ 931.985702][T18721] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 931.991590][T18721] alloc_pages_mpol+0x1fb/0x550 [ 931.996440][T18721] folio_alloc_noprof+0x20/0x2d0 [ 932.001372][T18721] filemap_alloc_folio_noprof+0x3a1/0x470 [ 932.007141][T18721] page_cache_ra_order+0x4c0/0xd00 [ 932.012249][T18721] filemap_fault+0x147c/0x2740 [ 932.017125][T18721] __do_fault+0x10a/0x490 [ 932.021446][T18721] do_pte_missing+0x1a6/0x3fb0 [ 932.026225][T18721] __handle_mm_fault+0x103d/0x2a40 [ 932.031333][T18721] handle_mm_fault+0x3fe/0xad0 [ 932.036116][T18721] do_user_addr_fault+0x60c/0x1370 [ 932.041224][T18721] exc_page_fault+0x5c/0xc0 [ 932.045734][T18721] asm_exc_page_fault+0x26/0x30 [ 932.050579][T18721] page last free pid 23 tgid 23 stack trace: [ 932.056561][T18721] __free_frozen_pages+0x69d/0xff0 [ 932.061671][T18721] rcu_core+0x799/0x14e0 [ 932.066291][T18721] handle_softirqs+0x216/0x8e0 [ 932.071058][T18721] run_ksoftirqd+0x3a/0x60 [ 932.075479][T18721] smpboot_thread_fn+0x3f4/0xae0 [ 932.080432][T18721] kthread+0x3c2/0x780 [ 932.084492][T18721] ret_from_fork+0x45/0x80 [ 932.088904][T18721] ret_from_fork_asm+0x1a/0x30 [ 932.093743][T18721] ------------[ cut here ]------------ [ 932.099207][T18721] kernel BUG at mm/filemap.c:3433! [ 932.104314][T18721] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 932.110700][T18721] CPU: 0 UID: 0 PID: 18721 Comm: syz.5.3891 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 932.122730][T18721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 932.132755][T18721] RIP: 0010:filemap_fault+0x1862/0x2740 [ 932.138277][T18721] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 932.157857][T18721] RSP: 0018:ffffc9001cd87510 EFLAGS: 00010246 [ 932.163893][T18721] RAX: 0000000000080000 RBX: ffffea00017a6680 RCX: ffffc9000c60a000 [ 932.171837][T18721] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff88806dff4cc4 [ 932.179789][T18721] RBP: ffffc9001cd877e0 R08: 0000000000000001 R09: 0000000000000000 [ 932.187744][T18721] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888023cdeff8 [ 932.195696][T18721] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 932.203639][T18721] FS: 00007fe70bd716c0(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 932.212540][T18721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.219097][T18721] CR2: 0000200000001fe7 CR3: 000000005ddea000 CR4: 00000000003526f0 [ 932.227042][T18721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 932.234995][T18721] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 932.242942][T18721] Call Trace: [ 932.246195][T18721] [ 932.249101][T18721] ? __pfx_filemap_fault+0x10/0x10 [ 932.254192][T18721] __do_fault+0x10a/0x490 [ 932.258496][T18721] do_pte_missing+0x1031/0x3fb0 [ 932.263325][T18721] ? __handle_mm_fault+0x1010/0x2a40 [ 932.268588][T18721] __handle_mm_fault+0x103d/0x2a40 [ 932.273680][T18721] ? __pfx___handle_mm_fault+0x10/0x10 [ 932.279119][T18721] ? find_vma+0xbf/0x140 [ 932.283335][T18721] ? __pfx_find_vma+0x10/0x10 [ 932.287997][T18721] handle_mm_fault+0x3fe/0xad0 [ 932.292739][T18721] do_user_addr_fault+0x7a6/0x1370 [ 932.297826][T18721] ? rcu_is_watching+0x12/0xc0 [ 932.302565][T18721] exc_page_fault+0x5c/0xc0 [ 932.307045][T18721] asm_exc_page_fault+0x26/0x30 [ 932.311872][T18721] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 932.317563][T18721] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 932.337146][T18721] RSP: 0018:ffffc9001cd87a78 EFLAGS: 00050202 [ 932.343186][T18721] RAX: 0000000000000001 RBX: 0000200000001fe7 RCX: 0000000000000001 [ 932.351128][T18721] RDX: ffffed100bddc9a5 RSI: 0000200000001fe7 RDI: ffff88805eee4d27 [ 932.359070][T18721] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed100bddc9a4 [ 932.367012][T18721] R10: ffff88805eee4d27 R11: 0000000000000000 R12: 0000000000000000 [ 932.374956][T18721] R13: ffff88805eee4d27 R14: dffffc0000000000 R15: 0000200000001fe7 [ 932.382902][T18721] _copy_from_user+0x98/0xd0 [ 932.387471][T18721] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 932.393085][T18721] snd_rawmidi_write+0x26e/0xc10 [ 932.397996][T18721] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 932.403426][T18721] ? avc_policy_seqno+0x9/0x20 [ 932.408162][T18721] ? selinux_file_permission+0x11f/0x580 [ 932.413773][T18721] ? __pfx_default_wake_function+0x10/0x10 [ 932.419565][T18721] ? bpf_lsm_file_permission+0x9/0x10 [ 932.424914][T18721] ? security_file_permission+0x71/0x210 [ 932.430527][T18721] ? rw_verify_area+0xcf/0x680 [ 932.435268][T18721] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 932.440699][T18721] vfs_writev+0x6c4/0xdc0 [ 932.445007][T18721] ? __pfx_vfs_writev+0x10/0x10 [ 932.449834][T18721] ? kmem_cache_free+0x2d4/0x4d0 [ 932.454744][T18721] ? __fget_files+0x20e/0x3c0 [ 932.459392][T18721] ? do_writev+0x295/0x330 [ 932.463786][T18721] do_writev+0x295/0x330 [ 932.468015][T18721] ? __pfx_do_writev+0x10/0x10 [ 932.472763][T18721] ? rcu_is_watching+0x12/0xc0 [ 932.477503][T18721] do_syscall_64+0xcd/0x260 [ 932.481987][T18721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.487863][T18721] RIP: 0033:0x7fe70af8e169 [ 932.492251][T18721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.511840][T18721] RSP: 002b:00007fe70bd71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 932.520225][T18721] RAX: ffffffffffffffda RBX: 00007fe70b1b5fa0 RCX: 00007fe70af8e169 [ 932.528171][T18721] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 932.536125][T18721] RBP: 00007fe70b010a68 R08: 0000000000000000 R09: 0000000000000000 [ 932.544068][T18721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.552012][T18721] R13: 0000000000000000 R14: 00007fe70b1b5fa0 R15: 00007ffc91506f98 [ 932.559958][T18721] [ 932.562951][T18721] Modules linked in: [ 932.568115][T18721] ---[ end trace 0000000000000000 ]--- [ 932.573564][T18721] RIP: 0010:filemap_fault+0x1862/0x2740 [ 932.579399][T18721] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 932.599098][T18721] RSP: 0018:ffffc9001cd87510 EFLAGS: 00010246 [ 932.605221][T18721] RAX: 0000000000080000 RBX: ffffea00017a6680 RCX: ffffc9000c60a000 [ 932.613210][T18721] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff88806dff4cc4 [ 932.621187][T18721] RBP: ffffc9001cd877e0 R08: 0000000000000001 R09: 0000000000000000 [ 932.629166][T18721] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888023cdeff8 [ 932.637133][T18721] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 932.645102][T18721] FS: 00007fe70bd716c0(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 932.654025][T18721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.660672][T18721] CR2: 0000200000001fe7 CR3: 000000005ddea000 CR4: 00000000003526f0 [ 932.668641][T18721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 932.676618][T18721] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 932.684758][T18721] Kernel panic - not syncing: Fatal exception [ 932.690900][T18721] Kernel Offset: disabled [ 932.695196][T18721] Rebooting in 86400 seconds..